chore(deps): update JavaScript SDK to v10.48.0

[github-actions]

Bumps scripts/update-javascript.sh from 10.47.0 to 10.48.0.

Auto-generated by a dependency updater.

Changelog

10.48.0

Important Changes

• feat(aws-serverless): Ship Lambda extension in npm package for container image Lambdas (#20133)

  The Sentry Lambda extension is now included in the npm package, enabling container image-based Lambda functions to use it. Copy the extension files into your Docker image and set the tunnel option:

  RUN mkdir -p /opt/sentry-extension
  COPY node_modules/sentry/aws-serverless/build/lambda-extension/sentry-extension /opt/extensions/sentry-extension
  COPY node_modules/sentry/aws-serverless/build/lambda-extension/index.mjs /opt/sentry-extension/index.mjs
  RUN chmod +x /opt/extensions/sentry-extension /opt/sentry-extension/index.mjs

  Sentry.init({
    dsn: '__DSN__',
    tunnel: 'http://localhost:9000/envelope',
  });

  This works with any Sentry SDK (sentry/aws-serverless, sentry/sveltekit, sentry/node, etc.).

• feat(cloudflare): Support basic WorkerEntrypoint (#19884)

  withSentry now supports instrumenting classes extending Cloudflare's WorkerEntrypoint. This instruments fetch, scheduled, queue, and tail handlers.

  import * as Sentry from 'sentry/cloudflare';
  import { WorkerEntrypoint } from 'cloudflare:workers';
  
  class MyWorker extends WorkerEntrypoint {
    async fetch(request: Request): Promise<Response> {
      return new Response('Hello World!');
    }
  }
  
  export default Sentry.withSentry(env => ({ dsn: env.SENTRY_DSN, tracesSampleRate: 1.0 }), MyWorker);

• ref(core): Unify .do* span ops to gen_ai.generate_content (#20074)

  All Vercel AI do* spans (ai.generateText.doGenerate, ai.streamText.doStream, ai.generateObject.doGenerate, ai.streamObject.doStream) now use a single unified span op gen_ai.generate_content instead of separate ops like gen_ai.generate_text, gen_ai.stream_text, gen_ai.generate_object, and gen_ai.stream_object.

• ref(core): Remove provider-specific AI span attributes in favor of gen_ai attributes in sentry conventions (#20011)

  The following provider-specific span attributes have been removed from the OpenAI and Anthropic AI integrations. Use the standardized gen_ai.* equivalents instead:

  Removed attribute	Replacement
  openai.response.id	gen_ai.response.id
  openai.response.model	gen_ai.response.model
  openai.usage.prompt_tokens	gen_ai.usage.input_tokens
  openai.usage.completion_tokens	gen_ai.usage.output_tokens
  openai.response.timestamp	(removed, no replacement)
  anthropic.response.timestamp	(removed, no replacement)

  If you reference these attributes in hooks (e.g. beforeSendTransaction), update them to the gen_ai.* equivalents.

• feat(core): Support embeddings in LangChain (#20017)

  Adds instrumentation for LangChain embeddings (embedQuery, embedDocuments), creating gen_ai.embeddings spans. In Node.js, embedding classes from langchain/openai, langchain/google-genai, langchain/mistralai, and langchain/google-vertexai are auto-instrumented. For other runtimes, use the new instrumentLangChainEmbeddings API:

  import * as Sentry from 'sentry/cloudflare';
  import { OpenAIEmbeddings } from 'langchain/openai';
  
  const embeddings = Sentry.instrumentLangChainEmbeddings(new OpenAIEmbeddings({ model: 'text-embedding-3-small' }));
  
  await embeddings.embedQuery('Hello world');

Other Changes

• feat(core): Support registerTool/registerResource/registerPrompt in MCP integration (#20071)
• feat(core, node): Portable Express integration (#19928)
• feat(deno): Add denoRuntimeMetricsIntegration (#20023)
• feat(deps): Bump bundler plugins to 5.2.0 (#20122)
• feat(deps): bump hapi/content from 6.0.0 to 6.0.1 (#20102)
• feat(node, bun): Enforce minimum collection interval in runtime metrics integrations (#20068)
• feat(nuxt): Exclude tracing meta tags on cached pages in Nuxt 5 (#20168)
• feat(react-router): Export sentryOnError (#20120)
• fix(aws-serverless): Add timeout to _endSpan forceFlush to prevent Lambda hanging (#20064)
• fix(cloudflare): Ensure every request instruments functions (#20044)
• fix(core): Only attach flags context to error events (#20116)
• fix(core): Replace regex with string check in stack parser to prevent main thread blocking (#20089)
• fix(core): set span.status to error when MCP tool returns JSON-RPC error response (#20082)
• fix(gatsby): Fix errorHandler signature to match bundler-plugin-core API (#20048)
• ref(core): Do not emit spans for chats.create in google-genai (#19990)

Internal Changes

• chore: Remove unused tsconfig-template folder (#20067)
• chore: Update validate-pr workflow (#20072)
• chore(deps-dev): Bump effect from 3.20.0 to 3.21.0 (#19999)
• chore(deps): Bump xmldom/xmldom from 0.8.3 to 0.8.12 (#20066)
• chore(deps): Bump lodash.template from 4.5.0 to 4.18.1 (#20085)
• chore(oxlint): Add typeawareness into oxlintrc (#20075)
• ci(deps): Bump getsentry/craft/.github/workflows/changelog-preview.yml from 2.24.1 to 2.25.2 (#20081)
• ci(deps): Bump mshick/add-pr-comment (#20078)
• ref(core): Extract shared endStreamSpan for AI integrations (#20021)
• ref(core): Simplify addResponseAttributes in openai integration (#20013)
• test(angular): Bump TypeScript to ~6.0.0 in angular-21 E2E test app (#20134)
• test(nuxt): Make Nuxt 5 (nightly) E2E optional (#20113)
• tests(node): Add node integration tests for Vercel ToolLoopAgent (#20087)

Full CHANGELOG.md diff

 -2,7 +2,115 
 
 ## Unreleased
 
-- "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
+## 10.48.0
+
+### Important Changes
+
+- **feat(aws-serverless): Ship Lambda extension in npm package for container image Lambdas ([#20133](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20133))**
+
+  The Sentry Lambda extension is now included in the npm package, enabling container image-based Lambda functions to use it. Copy the extension files into your Docker image and set the `tunnel` option:
+
+  ```dockerfile
+  RUN mkdir -p /opt/sentry-extension
+  COPY node_modules/sentry/aws-serverless/build/lambda-extension/sentry-extension /opt/extensions/sentry-extension
+  COPY node_modules/sentry/aws-serverless/build/lambda-extension/index.mjs /opt/sentry-extension/index.mjs
+  RUN chmod +x /opt/extensions/sentry-extension /opt/sentry-extension/index.mjs
+  ```
+
+  ```js
+  Sentry.init({
+    dsn: '__DSN__',
+    tunnel: 'http://localhost:9000/envelope',
+  });
+  ```
+
+  This works with any Sentry SDK (`sentry/aws-serverless`, `sentry/sveltekit`, `sentry/node`, etc.).
+
+- **feat(cloudflare): Support basic WorkerEntrypoint ([#19884](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/19884))**
+
+  `withSentry` now supports instrumenting classes extending Cloudflare's `WorkerEntrypoint`. This instruments `fetch`, `scheduled`, `queue`, and `tail` handlers.
+
+  ```ts
+  import * as Sentry from 'sentry/cloudflare';
+  import { WorkerEntrypoint } from 'cloudflare:workers';
+
+  class MyWorker extends WorkerEntrypoint {
+    async fetch(request: Request): Promise<Response> {
+      return new Response('Hello World!');
+    }
+  }
+
+  export default Sentry.withSentry(env => ({ dsn: env.SENTRY_DSN, tracesSampleRate: 1.0 }), MyWorker);
+  ```
+
+- **ref(core): Unify .do\* span ops to `gen_ai.generate_content` ([#20074](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20074))**
+
+  All Vercel AI `do*` spans (`ai.generateText.doGenerate`, `ai.streamText.doStream`, `ai.generateObject.doGenerate`, `ai.streamObject.doStream`) now use a single unified span op `gen_ai.generate_content` instead of separate ops like `gen_ai.generate_text`, `gen_ai.stream_text`, `gen_ai.generate_object`, and `gen_ai.stream_object`.
+
+- **ref(core): Remove provider-specific AI span attributes in favor of `gen_ai` attributes in sentry conventions ([#20011](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20011))**
+
+  The following provider-specific span attributes have been removed from the OpenAI and Anthropic AI integrations. Use the standardized `gen_ai.*` equivalents instead:
+
+  | Removed attribute                | Replacement                  |
+  | -------------------------------- | ---------------------------- |
+  | `openai.response.id`             | `gen_ai.response.id`         |
+  | `openai.response.model`          | `gen_ai.response.model`      |
+  | `openai.usage.prompt_tokens`     | `gen_ai.usage.input_tokens`  |
+  | `openai.usage.completion_tokens` | `gen_ai.usage.output_tokens` |
+  | `openai.response.timestamp`      | _(removed, no replacement)_  |
+  | `anthropic.response.timestamp`   | _(removed, no replacement)_  |
+
+  If you reference these attributes in hooks (e.g. `beforeSendTransaction`), update them to the `gen_ai.*` equivalents.
+
+- **feat(core): Support embeddings in LangChain ([#20017](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20017))**
+
+  Adds instrumentation for LangChain embeddings (`embedQuery`, `embedDocuments`), creating `gen_ai.embeddings` spans. In Node.js, embedding classes from `langchain/openai`, `langchain/google-genai`, `langchain/mistralai`, and `langchain/google-vertexai` are auto-instrumented. For other runtimes, use the new `instrumentLangChainEmbeddings` API:
+
+  ```javascript
+  import * as Sentry from 'sentry/cloudflare';
+  import { OpenAIEmbeddings } from 'langchain/openai';
+
+  const embeddings = Sentry.instrumentLangChainEmbeddings(new OpenAIEmbeddings({ model: 'text-embedding-3-small' }));
+
+  await embeddings.embedQuery('Hello world');
+  ```
+
+### Other Changes
+
+- feat(core): Support registerTool/registerResource/registerPrompt in MCP integration ([#20071](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20071))
+- feat(core, node): Portable Express integration ([#19928](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/19928))
+- feat(deno): Add `denoRuntimeMetricsIntegration` ([#20023](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20023))
+- feat(deps): Bump bundler plugins to `5.2.0` ([#20122](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20122))
+- feat(deps): bump hapi/content from 6.0.0 to 6.0.1 ([#20102](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20102))
+- feat(node, bun): Enforce minimum collection interval in runtime metrics integrations ([#20068](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20068))
+- feat(nuxt): Exclude tracing meta tags on cached pages in Nuxt 5 ([#20168](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20168))
+- feat(react-router): Export `sentryOnError` ([#20120](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20120))
+- fix(aws-serverless): Add timeout to \_endSpan forceFlush to prevent Lambda hanging ([#20064](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20064))
+- fix(cloudflare): Ensure every request instruments functions ([#20044](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20044))
+- fix(core): Only attach `flags` context to error events ([#20116](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20116))
+- fix(core): Replace regex with string check in stack parser to prevent main thread blocking ([#20089](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20089))
+- fix(core): set span.status to error when MCP tool returns JSON-RPC error response ([#20082](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20082))
+- fix(gatsby): Fix errorHandler signature to match bundler-plugin-core API ([#20048](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20048))
+- ref(core): Do not emit spans for chats.create in google-genai ([#19990](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/19990))
+
+<details>
+  <summary> <strong>Internal Changes</strong> </summary>
+
+- chore: Remove unused `tsconfig-template` folder ([#20067](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20067))
+- chore: Update validate-pr workflow ([#20072](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20072))
+- chore(deps-dev): Bump effect from 3.20.0 to 3.21.0 ([#19999](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/19999))
+- chore(deps): Bump xmldom/xmldom from 0.8.3 to 0.8.12 ([#20066](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20066))
+- chore(deps): Bump lodash.template from 4.5.0 to 4.18.1 ([#20085](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20085))
+- chore(oxlint): Add typeawareness into oxlintrc ([#20075](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20075))
+- ci(deps): Bump getsentry/craft/.github/workflows/changelog-preview.yml from 2.24.1 to 2.25.2 ([#20081](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20081))
+- ci(deps): Bump `mshick/add-pr-comment` ([#20078](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20078))
+- ref(core): Extract shared endStreamSpan for AI integrations ([#20021](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20021))
+- ref(core): Simplify addResponseAttributes in openai integration ([#20013](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20013))
+- test(angular): Bump TypeScript to ~6.0.0 in angular-21 E2E test app ([#20134](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20134))
+- test(nuxt): Make Nuxt 5 (nightly) E2E optional ([#20113](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20113))
+- tests(node): Add node integration tests for Vercel `ToolLoopAgent` ([#20087](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/20087))
+
+</details>
 
 ## 10.47.0
 

[github-actions]

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

• chore(deps): update JavaScript SDK to v10.48.0 by github-actions[bot] in #5975

• fix(profiling): Fix app start transaction profile timestamp offset by antonis in #5962
• fix(android): Use componentStack as fallback for missing error stack traces by antonis in #5965
• chore(deps): bump addressable from 2.8.7 to 2.9.0 in /samples/react-native-macos by dependabot in #5967
• chore(deps): bump addressable from 2.8.7 to 2.9.0 in /samples/react-native by dependabot in #5966
• fix(ios): Add SENTRY_PROJECT_ROOT env var for monorepo support by antonis in #5961
• feat(ios): Add attachAllThreads option by antonis in #5960
• fix(core): Lazy-load Metro internal modules to prevent Expo 55 import errors by lucas-zimerman in #5958
• chore(deps): update Cocoa SDK to v9.9.0 by github-actions in #5956
• chore(deps): update Maestro to v2.4.0 by github-actions in #5955
• Feat: Fallback to stacktrace parsing by lucas-zimerman in #5946
• fix(ci): Bump Node to 22 in size-analysis and testflight workflows by antonis in #5954
• feat(playground): Open Sentry in desktop browser from Expo apps by antonis in #5947
• chore(core): Bump sample app to React Native 0.84.1 by antonis in #5941
• Size analysis for React Native SDK by alwx in #5949
• chore(deps): bump lodash from 4.17.23 to 4.18.1 by dependabot in #5953
• chore(deps): bump yauzl to ^3.2.1 by antonis in #5950
• chore(deps): bump brace-expansion to ^2.0.3 by antonis in #5951
• chore(deps): bump @xmldom/xmldom to fix XML injection by antonis in #5952

---

_{🤖 This preview updates automatically when you update the PR.}

[github-actions]

	Fails
🚫	Pull request is not ready for merge, please add the "ready-to-merge" label to the pull request

Generated by 🚫 dangerJS against 914f9b5

[sentry]

Sentry Build Distribution

App Name	App ID	Version	Configuration	Install Page
Sentry RN	io.sentry.reactnative.sample	8.7.0 (82)	Release	Install Build

Configure sentry-react-native build distribution settings